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Quick Tips 

• Enter your search terms in lower case with a space between the terms. 

sales offices 

You can also enter a full question or concept in plain language. 

Where are the sales offices? 

• Capitalize proper nouns to search for specific people, places, or 
products. 

John Colter, Netscape Navigator 

• Enclose a phrase in double quotes to search for that exact phrase. 

"museum of natural history" "museum of modern art" 

• Narrow your searches by using a + if a search term mujt„a|3Bear on a 



museum +art 

• Exclude pages by using a - if a search term must not appear on a page. 

museum -Paris 

Combine these techniques to create a specific search query. The better 
your description of the information you want, the more relevant your 
results will be. 
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1 An approach to integration of Web information source search and Web information B 



^ retrieval 

^ Yuichi Lizuka, Mitsuaki Tsunakawa, Shin-ichiro Seo, Tetsuo Ikeda 

March 2000 Proceedings of the 2000 ACM symposium on Applied computing - Volume 
1 

Publisher: ACM Press 

Full text available: ^.pdSMZJ56„K@i Additional Information: fu [[.citation, references, cjtjngs, index terms 



Keywords: WWW, heterogeneous information sources, information resource 
management, mediator, universal relation 



2 A modLf[cajjon..sup.port Q 
modifications 

™ T. Tenma, Y. Sato, Y. Morimoto, M. Tanaka, T. Ichikawa 

January 1990 Proceedings of the 1990 ACM annual conference on Cooperation 
Publisher: ACM Press 

Full text available: ^ pdf(874.27 KB) Additional Information: full citation, abstract, references, index terms 

Programmers modify software for many reasons. When a part of a software is modified, 
side-effects of the modification are propagated to other parts of the software. By 
correcting these side-effects automatically, the productivity and the reliability of software 
development increases. This paper proposes an approach based on constraints and 
component-based software representation for detecting and correcting side-effects. A 
system based on the approach for type modifications is presented. Th ... 

3 ATlAS;Ageogr^ Q 
& geoflrapji^ 

v Tateyuki Tsurutani, Yutaka Kasahara, Masaru Naniwada 

July 1980 ACM SIGGRAPH Computer Graphics , Proceedings of the 7th annual 

conference on Computer graphics and interactive techniques SIGGRAPH 

'80, Volume 14 Issue 3 
Publisher: ACM Press 

Full text available* j p l Ddff410.66 KB) Additional Information: full citation, abstract, references, citings , index 

terms 
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The design concepts and languages of a geographic information system ATLAS 
(Administration and Total Landuse Analysis Support system) are proposed. The database 
structure is designed based on the geographic information structure concepts which 
contain semantic structure, topological structure and location structure. For a flexible user 
interface, the system provides ... 

Keywords: Cartography, Database, Geographic information structure, Geographic 
information system, Graphic language, Regional analysis, Regional planning, Thematic 
map 



4 MaJgebMc mo^^ Q 



This paper intends to clarify logical and physical information structures and essential 
operations in the data processing on them. Basic terminologies are due to Information 
Algebra originally proposed by CODASYL Language Structure Group in 1961, however, 
several new concepts have been introduced to ease the discussion from the software 
implementation point of view. The paper is included in internal research memorandom 
titled "Data Base Management Systems - a Theory and a Practice,&rd ... 

Keywords: Data base, Data base management, Indexing, Information algebra, 
Information storage and retrieval, Information structure 



5 Papers: A CD-ROM retrieval system with multiple dialogue agents Q 
Keiichi Sakai, Tsuyoshi Yagisawa, Minoru Fujita 

August 1996 Proceedings of the 16th conference on Computational linguistics - 



Publisher: Association for Computational Linguistics 

Full text available: ^.pdg53 LM KB} Additional Information: M.crtatipry, abstract, references 

In this paper, we proposed a new dialogue system with multiple dialogue agents. In our 
new system, three types of agents: a) domain agents, b) strategy agents, and c) context 
agents were realized. They give the following advantages to the user:* the domain agents 
make the user aware of the boundary between the domains.* the strategy agents make 
the user aware of the difference between the strategies.* the context agents help the user 
to deal with multiple goals. We expect that the ... 

Some considerations in database application programming 
Isao Miyamoto 

October 1976 Proceedings of the 2nd international conference on Software 



Publisher: IEEE Computer Society Press 

Full text available: ^ pdf{950.40 K3) Additional Information: full citation, abstract, references, index terms 




This paper describes the experimental approach to achieve the higher productivity, 
reliability, maintainability and the performance in the database application programming or 
of the programs. We have practiced the structured programming on the database 
processings in order to write the reliable database application programs. Then we 
introduce the simulated forms of the basic control structures in COBOL which is the host 
language, the structured representations of the DML (Data Ma ... 
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Keywords: Control structure, Data locality, Data manipulation language, Database 
system, Maintainability, Performance, Productivity, Reliability, Structured programming, 
Tool 



7 £Yajuating.the.technglo Q 
Ellen M. Voorhees, Donna Harman 

October 1998 Proceedings of a workshop on held at Baltimore, Maryland: October 13- 
15, 1998 

Publisher: Association for Computational Linguistics 

Full text available: ^pdfQ_J8_M3) Additional Information: MlQltatjc^ abstract, references 

Phase III of the TIPSTER project included three workshops for evaluating document 
detection (information retrieval) projects: the fifth, sixth and seventh Text REtrieval 
Conferences (TRECs). This work was co-sponsored by the National Institute of Standards 
and Technology (NIST), and included evaluation not only of the TIPSTER contractors, but 
also of many information retrieval groups outside of the TIPSTER project. The conferences 
were run as workshops that provided a forum for participating gro ... 

8 A dual structured data base system Q 
^ w - °- Clark, L. L. Shannon 

^ November 1973 ACM SIGPLAN Notices , ACM SIGIR Forum , Proceedings of the 1973 
meeting on Programming languages and information retrieval 

SIGPLAN '73, Volume 10 , 9 Issue 1 , 3 

Publisher: ACM Press 

Full text available: ^pdf{.l,Q1„M§) Additional Information: fuJJ. Malion, Merences 



9 IJlCPmpjete^ 

Haim Mendelson, Aditya N. Saharia 
^ June 1986 ACM Transactions on Database Systems (TODS), Volume 11 Issue 2 
Publisher: ACM Press 

Full text available: f| pdf(1 .35 MB) Additional Information: fujl ciiation, abstract, reMences, citings, index 
^ terms 

This paper presents a methodology for trading-off the cost of incomplete information 
against the data-related costs in the design of database systems. It investigates how the 
usage patterns of the database, defined by the characteristics of information requests 
presented to it, affect its conceptual design. The construction of minimum-cost answers to 
information requests for a variety of query types and cost structures is also studied. The 
resulting costs of incomplete database information ... 

10 McrgmenMma 

^ M. Akhtar Ali, Alvaro A. A. Fernandes, Norman W. Paton 

^ November 2000 Proceedings of the 3rd ACM international workshop on Data 
warehousing and OLAP 

Publisher: ACM Press 

Full text available: ^pdfQ7A§5.KBJ Additional Information: MLcitaticn, references, citings, index.terms 



11 fispujm^^^ 

M£ Ercan E. Kuruoglu, Vern T. Tan 

^ November 2000 Proceedings of the 2000 ACM workshops on Multimedia 
Publisher: ACM Press 
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Full text available: ^pdfl628..12.KBJ Additional Information: MlclMicn, abstract, references, index terms 

In this paper, we propose a technique for efficient document retrieval from digital libraries 
containing document images which are token based compressed. The query image is 
captured from a paper document by the video scanning tool of a multimedia system. The 
technique we propose uses the layout information supplied by the relative positions of the 
character tokens on the page of a "query" paper document to retrieve the original 
document in the image database. This technique avoid ... 

Keywords: document image databases, image similarity retrieval, multimedia systems, 
video scanning 



12 FORMANAGER: an office forms management system Q 
^ S. Bing Yao, Alan R. Hevner, Zhongzhi Shi, Dawei Luo 

^ August 1984 ACM Transactions on Information Systems (TOIS), Volume 2 issue 3 
Publisher: ACM Press 

Full text available: ffi pdf(1.35 MB) Additional Information: full citation, citings, index terms 



13 The. genera Ijzg^ Q 
A. Bookstein 

May 1981 ACM SIGIR Forum , Proceedings of the 4th annual international ACM 

SIGIR conference on Information storage and retrieval: theoretical issues 
in information retrieval SIGIR '81, volume 16 issue l 
Publisher: ACM Press 

Full text available: '|| pdf(516.57 K3) Additional Information: full citation, references 




14 ABST^^ 

M Algebraic Computation and Report of the Last Seasonal Meeting 
^ Franz Winkler 

May 1987 ACM SIGSAM Bulletin, Volume 21 issue 2 

Publisher: ACM Press 

Full text available: ^ pdf(202.79 KB) Additional Information: full citation, abstract 

In September, 1984, Japanese SIGSAM was formed in Japan Society of Software Science 
and Technology. The first chairman is Dr. Tateaki Sasaki, The Institute of Physical and 
Chemical Research, and the working committee members are Dr. Naoto Niki, The Institute 
of Statistical Mathematics, Prof. Hidetsune Kobayashi, Department of Mathematics, Nihon 
University, Mr. Yoshinari Fukui, Total Information System Division, Toshiba Corporation, 
and Mr. Akio Furukawa, Department of Mathematics, Tokyo Metropol ... 

15 ]nformatics:„sem 
Pierre piante 

September 1980 Proceedings of the 8th conference on Computational linguistics 
Publisher: Association for Computational Linguistics 

Full text available: ^pM4§M2_KBi Additional Information: MLcMioq, abstract, references 

APLEC (I'APrenti-LECteur - or Learning Reader) is an extension of the Deredec software, a 
programming system devoted to the content analysis and linguistic treatment of 
texts. APLEC will associate automatically to any text descriptive grammar (TDG - 
Grammaire descriptive de texte) a question/answer module where the questions are asked 
in a given natural language by the user, and where the answers are tracked down in the 
textual corpus undergoing examination. 
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16 information classification and navigation based on 5W1 H of the target information Q 
Takahiro Ikeda, Akitoshi Okumura, Kazunori Muraki 

August 1998 Proceedings of the 17th international conference on Computational 
linguistics - Volume 1 , Proceedings of the 36th annual meeting on 
Association for Computational Linguistics - Volume 1 

Publisher: Association for Computational Linguistics , Association for Computational Linguistics 

Full text available: fB pdf(940.83 KB) 

' " Additional Information: MLcjtatiorL abstract, references 

W Publisher Site 

This paper proposes a method by which 5W1H (who, when, where, what, why, how, and 
predicate) information is used to classify and navigate Japanese-language texts. 5W1H 
information, extracted from text data, has an access platform with three functions: 
episodic retrieval, multi-dimensional classification, and overall classification. In a six- 
month trial, the platform was used by 50 people to access 6400 newspaper articles. The 
three functions proved to be effective for office documentation work a ... 

17 Papers;.Apage^ Q 
ijftLj Takao Shimomura 

^ March 2004 ACM SIGSOFT Software Engineering Notes, Volume 29 issue 2 
Publisher: ACM Press 

Full text available: ^.pdf(152 MB) Additional Information: full.cjMion, abstract, references 

To develop Web applications, various integrated development environments have been 
used. In addition, several frameworks for efficiently developing those applications have 
been proposed. This paper presents the image-oriented page-transition framework that 
models a Web application as a set of transitions of Web pages, and using visual 
components, makes it easier to write processes executed when a Web page transfers to 
another Web page. This page-transition framework has the following novel featu ... 

Keywords: Web application, automatic code generation, image-oriented design, page- 
transition framework 



18 A Modification Request Controi System 
D. B. Knudsen, A. Barofsky, L R. Satz 

October 1976 Proceedings of the 2nd international conference on Software 

engineering 
Publisher: IEEE Computer Society Press 

Full text available: ^.pdg656 : 80„K3jt Additional Information: full citation , abstract , references , ciilnas, index 

The Modification Request Control System (MRCS) tracks and reports project change 
requests and resulting activity through interactive input and extraction of change request 
data from computer files. MRCS is one of the tools available as part of the Programmer's 
Workbench (PWB). It was developed to aid in the timely control and coordination of 
software changes. It provides the capability to: (1) interactively create, update, and print 
MRS; (2) track and record the flow of the MR through the s ... 

Keywords: Project management, Software control, UNIX 



19 Expjicjj..Expressjon 
Analog.JClayouts 

Yukiko Kubo, Shigetoshi Nakatake, Yoji Kajitani, Masahiro Kawakita 

January 2002 Proceedings of the 2002 conference on Asia South Pacific design 
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automation/VLSI Design 

Publisher: IEEE Computer Society 

Full text available: fBfidfC8.35.54.KB). 

Additional Information: MlQjtatjpn, absfract 

W Publisher Srte 

Our target is automation of analog circuit's layout, which is a bottleneck in mixed -signal's 
design. We formulate the layout explicitly considering manufacturing process, and propose 
an algorithm that consists of simultaneous expression and optimization of placement and 
routing. The key is that all the cells and wires are represented by rectangles. The 
algorithm is combined into a commercial tool, and the performance convinced us that the 
utilization shortens the design time. 

Keywords: analog design, mixed signal design, placement, shape-based layout, 
sequence-pair 



20 The human-computer interface in information systems design: The effect of data 
j& model, system and task characteristics on user query performance: an empirical 
study 

Hock Chan, Keng Siau, Kwok-Kee Wei 

December 1997 ACM SZGMIS Database, Volume 29 issue i 

Publisher: ACM Press 

Full text available: pdf(1 .48 MB) Add 't' ona l Information: M citation, abstract, refeiences, citlfigs, index 
^ terras 

With the proliferation of end-user computing and empowerment of end users in the 
organizations, the user-database interface is increasingly being recognized as an important 
research area. A user-database interface consists of two key components: the data model 
and the query language. Database management system designers can manipulate these 
two components to produce an effective database interface to maximize user task 
performance. However, in order to do this, the designers first need to know t ... 

Keywords: entity-relationship model, relational model, textual query language, user- 
database interface, visual query language 
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1 ComputeLsecuri^ 
^ Xinwen Zhang, Yingjiu Li, Divya Nalla 

^ March 2005 Proceedings of the 2005 ACM symposium on Applied computing SAC '05 
Publisher: ACM Press 

Full text available: ^.pdf(106 : 94 KB) Additional Information: Ml.citatjon t abstract, references, indexterrns 

In traditional access control models like MAC, DAC, and RBAC, authorization decisions are 
determined according to identities of subjects and objects, which are authenticated by a 
system completely. Modern access control practices, such as DRM, trust management, and 
usage control, require flexible authorization policies. In such systems, a subject may be 
only partially authenticated according to one or more attributes. In this paper we propose 
an attribute-based access matrix model, named ABAM, w ... 



Keywords: access control, access matrix model, decidability, safety analysis 



2 Team~and-role-based organizational context and access control for cooperative 

hypermedja.enyironme 
^ Weigang Wang 

February 1999 Proceedings of the tenth ACM Conference on Hypertext and 

hypermedia : returning to our diverse roots: returning to our diverse 
roots 

Publisher: ACM Press 

Full text available: ^ pdf(2.13 MB) Additional Information: full citation, references, citings, index terms 



Keywords: cooperative hypermedia, coordination, groupware, process support, role- 
based access control, workflow 



PMQleJLand^ 
W. Keith Edwards 

November 1996 Proceedings of the 1996 ACM conference on Computer supported 

cooperative work 
Publisher: ACM Press 

Full text available: ^.p.dgl,23MB) Additional Information: MLcitatjon, references, citings, jndex terms 



http://portal.acm.org/resultsxfm?coll=ACM&dl=ACM&CFro=78627517&C^ 6/16/06 



Results (page 1): +"access control" +"access rights" +attribute 



Page 2 of 6 



Keywords: Intermezzo, access control, computer-supported cooperative work, 
infrastructure, policies, roles 



4 Managing trust between collaborating companies using outsourced role based 

M access control 

^ Thomas Hildmann, Jorg Barholdt 

October 1999 Proceedings of the fourth ACM workshop on Role-based access control 

Publisher: ACM Press 

Full text available: "Pi pdf(885.42 KB) Additional Information: M.crte.tion, references, citings, indexterms 



Applications;,^ 
£ Axel Kern, Claudia Walhorn 
June 2005 Proceedings of the tenth ACM symposium on Access control models and 

technologies 
Publisher: ACM Press 

Full text available: ^.pdf(21 8,86 K3j Additional Information: Ml cjtatoQi abstract, references, indexjerrns 

The administration of users and access rights in large enterprises is a complex and 
challenging task. Role-based access control (RBAC) is a powerful concept for simplifying 
access control. In particular, Enterprise Roles spanning across different IT systems are 
increasingly used as a basis for company-wide security management. However, the 
administration of roles in large organisations can become quite cumbersome and needs to 
be automated. During the past years, rules have been used to support au ... 

Keywords: SAM Jupiter, automated identity management, directoriescase studies, 
enterprise role-based access control (ERBAC), provisioning engine, role-based access 
control (RBAC), rule engine, rulesaccess rights, security administration, security 
provisioning 




Roie and task-based access control in the PerDiS groupware platform 
George Coulouris, Jean Dollimore, Marcus Roberts 

October 1998 Proceedings of the third ACM workshop on Role-based access control 
Publisher: ACM Press 

Full text available: 'pS pdff 1.01 MB) Additional Information: full citation , references, index terms 



7 Access control: First experiences using XACML for access control in distributed 
M systems 

^ Markus Lorch, Seth Proctor, Rebekah Lepro, Dennis Kafiira, Sumit Shah 
October 2003 Proceedings of the 2003 ACM workshop on XML security 
Publisher: ACM Press 

Full text available: MpdfC459.30 KB) Additional Information: fuM citation, abstract, references, citings, index 
. ....a..*....-. terms, review 

Authorization systems today are increasingly complex. They span domains of 
administration, rely on many different authentication sources, and manage permissions 
that can be as complex as the system itself. Worse still, while there are many standards 
that define authentication mechanisms, the standards that address authorization are less 
well defined and tend to work only within homogeneous systems. This paper presents 
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XACML, a standard access control language, as one component of a distributed a ... 

Keywords: access control decision, access control enforcement, authorization, distributed 
system security, policy language, policy management 



Impmyjngthe^ 

Michael M. Swift, Anne Hopkins, Peter Brundrett, Cliff Van Dyke, Praerit Garg, Shannon 
Chan, Mario Goertzel, Gregory Jensenworth 

November 2002 ACM Transactions on Information and System Security (TISSEC), 

Volume 5 Issue 4 
Publisher: ACM Press 

Full text available: «i)df(447 78 KB) Additional Information: full citation . *bs$&& references , cjiioc£ t ]n4ez 

' ' terms* review. 

This article presents the mechanisms in Windows 2000 that enable fine-grained and 
centrally managed access control for both operating system components and applications. 
These features were added during the transition from Windows NT 4.0 to support the 
Active Directory, a new feature in Windows 2000, and to protect computers connected to 
the Internet. While the access control mechanisms in Windows NT are suitable for file 
systems and applications with simple requirements, they fall short of the ... 

Keywords: Access control lists, Microsoft Windows 2000, Windows NT, active directory 



NetWare 4 as an example of role-based access control 
Jeremy Epstein, Ravi Sandhu 

December 1996 Proceedings of the first ACM Workshop on Role-based access control 
Publisher: ACM Press 

Full text available: l P| pdf(812.01 KB) Additional Information: full citation, references. citirtqs. index terms 



Jonathan D. Moffett, Emil C. Lupu 

October 1999 Proceedings of the fourth ACM workshop on Role-based access control 
Publisher: ACM Press 

Full text available: 'Pi pdf(856.14 KB) Additional Information: lull citation, references, citings , index terms 



11 Secure 

^ Lauri I. W. Pesonen, Jean Bacon 

September 2005 Proceedings of the 5th international workshop on Software 
engineering and middleware SEM '05 

Publisher: ACM Press 

Full text available: ^ pdfl46470 KB) Additional Information: full citation , abstract, references 

Publish/subscribe research has so far been mostly focused on efficient event routing, event 
filtering, and composite event detection. The little research that has been published 
regarding security in publish/subscribe systems has been tentative at best. This paper 
presents a model for secure type names, and definitions for type-checked, content-based 
publish/subscribe systems. Our model provides a cryptographically verifiable binding 
between type names and type definitions. It also produces self ... 
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Mcess contM^ 
^ M Goodwin, K J McDonell 

August 1986 ACM SIGCOMM Computer Communication Review , Proceedings of the 

ACM SIGCOMM conference on Communications architectures & protocols 

SIGCOMM '86, Volume 16 Issue 3 

Publisher: ACM Press 

Full text available: pdf(809.60 KB) Additional Information: full citation, abstract, references, index terms 

Directory Systems to support communications networks are currently the subject of 
serious international standardization efforts. The most recent CCITT and ISO proposals for 
Directory Systems are summarized, and within this context the requirements for flexible 
and robust access control mechanisms are examined. The existence of varied access 
control policies at the international, national and local levels and the need to maintain the 
integrity of Directory System information are identified a ... 

1 3 Access, control .in.^ 

^ William Tolone, Gail-Joon Ahn, Tanusree Pai, Seng-Phil Hong 
^ March 2005 ACM Computing Surveys (CSUR), volume 37 issue l 
Publisher: ACM Press 

Full text available: ^pd*247. J4„KB) Additional Information: fuJJ.cltat.ion, abstract, references, index terms 

Balancing the competing goals of collaboration and security is a difficult, multidimensional 
problem. Collaborative systems often focus on building useful connections among people, 
tools, and information while security seeks to ensure the availability, confidentiality, and 
integrity of these same elements. In this article, we focus on one important dimension of 
this problem— access control. The article examines existing access control models as 
applied to collaboration, highlighting not only th ... 

Keywords: Access control, collaboration, security models 
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David W. Chadwicic, Alexander Otenko 
^ June 2002 Proceedings of the seventh ACM symposium on Access control models and 
technologies 

Publisher: ACM Press 

Full text available: *P| pdff 160.46 KB) Additional Information: full citation, abstract , references , citings, index 

terms 

This paper describes the output of the PERMIS project, which has developed a role based 
access control infrastructure that uses X.509 attribute certificates (ACs) to store the users' 
roles. All access control decisions are driven by an authorization policy, which is itself 
stored in an X.509 attribute certificate, thus guaranteeing its integrity. All the ACs can be 
stored in one or more LDAP directories, thus making them widely available. Authorization 
policies are written in XML according to a ... 

Keywords: Privilege management infrastructure, RBAC, X.509, XML, attribute certificates, 
authorization, policies 
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We present some issues relevant to the design of a secure platform for distributed mobile 
computing, that goes beyond existing ad-hoc approaches to software mobility. This 
platform aims to support wide-area computing applications such as active network 
infrastructures or network supervision tools. Our contribution is two-fold: the first part of 
the paper is a survey of the security features of a few languages and virtual machines as 
regards authentication, access control, and communications secu ... 
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July 2000 Proceedings of the fifth ACM workshop on Role-based access control 
Publisher: ACM Press 

Full text available- ^ P dff101 78 KB) Additional Information: full citatjon, abstract, references, citings, index 

terms 

In this paper we describe the work in progress with a process-oriented approach for role- 
finding to implement Role-Based Security Administration. Our results stem from using a 
recently proposed role model and procedural model at Siemens AG ICN, a large industrial 
organization. The core of this paper presents the data model, which integrates business 
processes, role based security administration and access control. Moreover, a structured 
top-down approach is outlined which is the ... 

Keywords: access control, authorizations, business processes, enterprise process 
modeling, heterogeneous systems, role based access control, security administration, 
security data models, security management, security models, single point of 
administration and control 
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As part of a major effort to increase programmer productivity, the U.S. Department of 
Defense has supported the design of an Ada Programming Support Environment (APSE) 
based on the Pebbleman/Stoneman sequence of documents [4], We have recently 
completed the first phase of this design, incorporating a standardized re-hostable virtual 
operating system and a retargetable Ada compiler with appropriate support tools. To 
support the coexistence on this system of many large and small software developme ... 
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We present a detailed examination of the access constraints for a small real-world Health 
Information System with the aim of achieving minimal access rights for each of the 
involved principals. We show that, even for such a relatively simple system, the resulting 
constraints are very complex and cannot be expressed easily or clearly using the static 
per-method access control lists generally supported by component-based software. We 
derive general requirements for the expressiveness of access con ... 

Keywords: Health Information System, access control, component 
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Publisher: ACM Press 

Full text available- f gjpdfM/9 03 KB) Additional Information: MLcMtQfl, absttifii, reMences, indexierms, 
" k^"^ review 

Learning is a socially embedded design process. But most of todays hypermedia systems 
fail to properly support the design-related and the social aspects of learning. Authoring 
and Web-publishing systems aim to support the authors design processes. Consequently, 
the activities of learners are confined to selecting and reading. Based on some 
fundamental reflections on the role of technology in learning processes, we conclude that 
top priority must be given to the construction of infrastructur ... 

Keywords: cooperative learning, cooperative support, learner-centered approaches, 
sTeam (structuring information in a team), web-based learning and teaching 
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October 2003 Proceedings of the 2003 ACM workshop on XML security 

Publisher: ACM Press 

Full text available: ^ pdf{298.78 KB) Additional Information: full citation, abstract, references, index terms 

As a large quantity of information is presented in XML format on the Web, there are 
increasing demands for XML security. Until now, research on XML security has been 
focused on the security of data communication using digital signatures or encryption 
technologies. As XML is also used for a data representation of data storage, XML security 
comes to involve not only communication security but also managerial security. 
Managerial security is guaranteed through access control, but existing XML acces ... 

Keywords: XML document, XML update, access control 
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November 2002 Proceedings of the 9th ACM conference on Computer and 

communications security 
Publisher: ACM Press 

Full text available: B ||| pdf{242.69 K3) Additional Information: full citation, abstract, references, index terms 

Secure broadcasting of web documents is becoming a crucial need for many web-based 
applications. Under the broadcast document dissemination strategy a web document 
source periodically broad-casts (portions of) its documents to a possibly large community 
of subjects, without the need of explicit subject requests. By secure broadcasting we mean 
that the delivery of information to sub-jects must obey the access control policies of the 
document source. Since different subjects may have the right to ... 

Keywords: XML, secure broadcasting, temporal key management 
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In this paper, we present our experiences concerning the enforcement of access rights 
extracted from ODRL-based digital contracts. We introduce the generalized Contract 
Schema (CoSa) which is an approach to provide a generic representation of contract 
information on top of rights expression languages. We give an overview of the design and 
implementation of the xoRELInterpreter software component. In particular, the 
xoRELInterpreter interprets digital contracts that are based on rights exp ... 
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|§£ Gabriel Kuper, Fabio Massacci, Nataliya Rassadko 

^ June 2005 Proceedings of the tenth ACM symposium on Access control models and 
technologies 
Publisher: ACM Press 

Full text available: ^j>df{168. J0.KB} Additional Information: fujJ.cjtatipn J abstract references, jndexjerms 

We investigate a generalization of the notion of XML security view introduced by Stoica 
and Farkas [17] and later refined by Fan et al. [8]. The model consists of access control 
policies specified over DTDs with XPath expression for data-dependent access control 
policies. We provide the notion of security views for characterizing information accessible 
to authorized users. This is a transformed (sanitized) DTD schema that can be used by 
users for query formulation and optimization. Then w ... 

Keywords: XML access control, XML views, XPath 
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November 1994 Proceedings of the 2nd ACM Conference on Computer and 
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Publisher: ACM Press 

Full text available: B g jpdf(884,04 KB) Additional Information: full citation, abstract, references, index terms 

In Europe, the use of computers in health care industry has increased rapidly in recent 
years. This increase, however, has been accomplished with research efforts in the area of 
privacy and confidentiality of personal data. In the German legislation, protection of 
personal data is guaranteed by the constitution, granting a general right to privacy. This 
constitutional right has been amended by the German Central Court 
(Bundesverfassungsgericht). It says that each individual has the right to ... 
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ACM SIGCOMM conference on Communications architectures & protocols 

SIGCOMM '86, Volume 16 Issue 3 

Publisher: ACM Press 

Full text available: ^ prtff 809.60 KB) Additional Information: full citation, abstract, references, index terms 

Directory Systems to support communications networks are currently the subject of 
serious international standardization efforts. The most recent CCITT and ISO proposals for 
Directory Systems are summarized, and within this context the requirements for flexible 
and robust access control mechanisms are examined. The existence of varied access 
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integrity of Directory System information are identified a ... 

7 Ieam«and»r^ 

M hypermedia environments 

^ Weigang Wang 

February 1999 Proceedings of the tenth ACM Conference on Hypertext and 

hypermedia : returning to our diverse roots: returning to our diverse 
roots 

Publisher: ACM Press 

Full text available: ffipdg2.13.MB). Additional Information: fuHcMtion, references, citings, index terms 



Keywords: cooperative hypermedia, coordination, groupware, process support, role- 
based access control, workflow 



8 Access control for large collections 
H. M. Gladney 

April 1997 ACM Transactions on Information Systems (TOIS), volume is issue 2 
Publisher: ACM Press 

Full text available: f5 pdfl482.G8 KB) Additional Information: fall citation , abstract , references , citings, jndex 
^ terms, review 

Efforts to place vast information resources at the fingertips of each individual in large user 
populations must be balanced by commensurate attention to information protection. For 
distributed systems with less-structured tasks, more-diversified information, and a 
heterogeneous user set, the computing system must administer enterprise-chosen access 
control policies. One kind of resource is a digital library that emulates massive collections 
of paper and other physical media for clerical, en ... 

Keywords: access control, digital library, document, electronic library, information 
security 



9 Document 

Mk V. Balasubramanian, A if Bashian 

^ July 1998 Communications of the ACM, Volume 41 issue 7 
Publisher: ACM Press 

Full text available* IP pdf(209 5"-? KB) Additional Information: MLcMtion, mtejences, citings, ingex„ternis J 
^ A ~ review 



10 An_ana!y^ 

descriptions 
^ Utz Westermann, Wolfgang Klas 
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^ review 

MPEG-7 constitutes a promising standard for the description of multimedia content. It can 
be expected that a lot of applications based on MPEG-7 media descriptions will be set up in 
the near future. Therefore, means for the adequate management of large amounts of 
MPEG-7-compliant media descriptions are certainly desirable. Essentially, MPEG-7 media 
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descriptions are XML documents following media description schemes defined with a 
variant of XML Schema. Thus, it is reasonable to investigate curren ... 
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This article presents the mechanisms in Windows 2000 that enable fine-grained and 
centrally managed access control for both operating system components and applications. 
These features were added during the transition from Windows NT 4.0 to support the 
Active Directory, a new feature in Windows 2000, and to protect computers connected to 
the Internet. While the access control mechanisms in Windows NT are suitable for file 
systems and applications with simple requirements, they fall short of the ... 

Keywords: Access control lists, Microsoft Windows 2000, Windows NT, active directory 
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Web presence has become a key consideration for the majority of companies and other 
organizations. Besides being an essential information delivery tool, the Web is increasingly 
being regarded as an extension of the organization itself, directly integrated with its 
operating processes. As this transformation takes place, security grows in importance. IBM 
Tivoli Access Manager offers a shared infrastructure for authentication and access 
management, technologies that have begun to emerge in the com ... 
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The shift from SGML to XML has created new demands for managing structured 
documents. Many XML documents will be transient representations for the purpose of data 
exchange between different types of applications, but there will also be a need for 
effective means to manage persistent XML data as a database. In this paper we explore 
requirements for an XML database management system. The purpose of the paper is not 
to suggest a single type of system covering all necessary features. Instead the pur ... 

Keywords: XML, XML database systems, data definition, data manipulation, data 
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Publisher: ACM Press 
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The major emphasis of public key infrastructure has been to provide a cryptographically 
secure means of authenticating identities. However, procedures for authorizing the holders 
of these identities to perform specific actions still need additional research and 
development. While there are a number of proposed standards for authorization structures 
and protocols such as KeyNote, SPKI, and SAML based on X.509 or other key-based 
identities, none have been widely adopted. As part of an effort to us ... 

Keywords: Public key infrastructure, XML, digital certificates 
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Full text available- * PjpdfH82 07 KB) Add ' tional Information: Ml citation, abstract, references, citings, index 
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Traditionally, access control has been studied in the areas of operating systems and 
database management systems. With the advent of multiuser interfaces, there is a need to 
provide access control in the user interface. We have developed a general framework for 
supporting access control in multiuser interfaces. It is based on the classical notion of an 
access matrix, a generalized editing-based model of user-application interaction, and a 
flexible model of user-user coupling. It has been de ... 
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XML is the undisputed standard for data representation and exchange. As companies 
transact business over the Internet, letting authorized customers directly access, and even 
modify, XML data offers many advantages in terms of cost, accuracy, and timeliness. 
Given the complex business relationships between companies, and the sensitive nature of 
information, access must be provided selectively, using sophisticated access control 
specifications. Using the specification directly to determine if a us ... 

Keywords: Access control, XML, structural locality 
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Data sharing is fundamental to computer-supported cooperative work: People share 
information through explicit communication channels and through their coordinated use of 
shared databases. This paper examines the data management requirements of group work 
applications on the basis of experience with three prototype systems and on observations 
from the literature. Database and object management technologies that support these 
requirements are briefly surveyed, and unresolved issues in the par ... 
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The PCTE project has defined a Public Tool Interface on which Software Engineering 
Environments can be constructed. The interface definition was put into the public domain 
in September 1986 and several implementations on several machines now exist. The 
PCTE+ project was set up to define a Public Tool Interface, based on the PCTE work, that 
could also serve for the development of defense and other high-security applications. This 
paper summarises the current status of PCTE activity, presents ... 
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